Back to Database
Status published
Medium
CVE-2025-35978
Improper restriction of communication channel to intended endpoints issue exists...
Vulnerability Description
Improper restriction of communication channel to intended endpoints issue exists in UpdateNavi V1.4 L10 to L33 and UpdateNaviInstallService Service 1.2.0091 to 1.2.0125. If a local authenticated attacker send malicious data, an arbitrary registry value may be modified or arbitrary code may be executed.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-35978
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
Fujitsu Client Computing Limited
View all reports →Affected Software
UpdateNavi, UpdateNaviInstallService
Vulnerable Versions:
V1.4 L10 to L33, Service 1.2.0091 to 1.2.0125
Timeline
Official Publish:
June 12th, 2025
Last Modified:
June 12th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.